Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3d830bb6-2bab-4cc6-b795-84f0b39be70f.roa
File: 3d830bb6-2bab-4cc6-b795-84f0b39be70f.roa (raw, json)
Hash identifier: Xup8vPFonGSl0LLPuU2z6d7hLG8ljuidRbr9TEkRbhg=
Subject key identifier: C3:30:DE:1D:95:AD:79:13:98:73:3C:93:0B:F7:7A:C3:9C:F9:30:F8
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 1562118E0991CBD1D58EB2EE137C39E211ECCF76
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3d830bb6-2bab-4cc6-b795-84f0b39be70f.roa
Signing time: Tue 15 Apr 2025 00:50:39 +0000
ROA not before: Tue 15 Apr 2025 00:50:39 +0000
ROA not after: Tue 20 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:62:11:8e:09:91:cb:d1:d5:8e:b2:ee:13:7c:39:e2:11:ec:cf:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Apr 15 00:50:39 2025 GMT
Not After : May 20 23:59:59 2025 GMT
Subject: serialNumber=0875677e861aefeea7ed442e867925e938d14d1be59061746a3b8ee054ea4076, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:af:64:b7:cc:ab:59:af:75:bf:18:42:02:
3e:c0:09:c5:d4:24:5c:23:b2:dd:a0:53:3a:69:78:
d5:67:66:d8:72:53:3d:55:11:02:66:d7:18:49:18:
29:67:21:d2:97:29:9c:d7:e7:8e:78:85:c0:61:85:
fb:d7:5b:a8:ae:ef:d3:83:78:02:cd:b8:e5:55:0f:
d0:5b:d5:9c:7c:fb:37:45:45:7e:73:76:1c:c9:d0:
89:18:65:1c:01:e5:f4:07:50:44:13:ec:b3:fd:18:
f6:e8:69:f9:b4:67:71:18:42:0f:4c:a1:38:11:c1:
a1:e2:d3:25:12:8a:a9:46:c5:7b:7a:d4:8b:ab:c4:
b3:65:b6:96:f6:68:40:24:32:89:92:33:5b:17:35:
c7:60:aa:ae:be:f2:0e:da:6e:d8:bf:64:20:f9:c6:
81:91:c3:1f:29:60:55:10:28:dc:23:f3:6f:28:9f:
c4:07:02:b3:b9:34:1a:5d:38:62:26:e4:46:ce:23:
ee:0e:8c:bd:34:46:6a:37:c9:5d:1b:b5:b9:d3:24:
57:ac:c8:0b:34:5b:08:9f:83:b6:d3:22:eb:c6:4b:
c9:c6:f4:a3:1c:55:ff:c7:a6:d3:ba:64:fe:f2:2d:
a2:17:95:0f:4a:80:e2:2d:7c:b7:a6:09:52:60:f4:
57:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:30:DE:1D:95:AD:79:13:98:73:3C:93:0B:F7:7A:C3:9C:F9:30:F8
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3d830bb6-2bab-4cc6-b795-84f0b39be70f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.242.0/24
Signature Algorithm: sha256WithRSAEncryption
03:2d:1b:29:73:2c:57:45:92:fa:fd:b9:de:fd:d3:d9:40:9b:
ed:81:6b:49:f6:c2:e1:2c:8e:d4:ca:4a:d6:b4:a0:e0:bb:b0:
db:b0:20:78:a2:65:6b:62:de:43:d9:23:26:31:e2:ea:6b:c9:
09:3c:56:5d:45:3d:fa:81:28:81:76:32:f9:44:50:ab:56:d2:
cb:7a:40:98:7e:46:27:f4:ad:ab:6f:11:3e:d7:43:3d:67:07:
c5:ad:cb:65:e3:60:77:4b:95:d5:3a:64:f9:d0:e8:b5:68:14:
ba:1e:a4:c7:2d:97:a2:3d:97:6b:f2:e6:50:46:19:7a:cf:b1:
6e:34:d1:c1:df:84:f4:7f:c2:08:82:65:16:9b:64:99:8e:03:
1f:29:25:f2:d7:3b:0f:ab:69:7e:b3:04:93:27:28:b2:7f:29:
25:af:f4:de:45:24:d9:90:fa:5a:32:db:de:cb:f1:80:50:29:
b8:cb:0d:fd:48:4e:01:09:ef:a7:58:a0:5a:51:ee:09:ef:7e:
e1:0d:04:12:53:96:0f:9b:83:89:0a:8c:de:d9:a4:2a:e6:8a:
51:a3:23:3b:45:07:fd:ef:cb:2b:b7:75:72:1e:4f:02:b2:87:
a5:3c:d9:77:96:1c:61:8f:6a:38:ac:0f:91:40:01:62:c8:13:
e2:48:34:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:36 2025 by rpki-client on console.sobornost.net